Shortcodes and extra features for Phlox theme, CVE-2023-37888

CVE, Research URL: CVE-2023-37888
Home page URL: Security reports for Shortcodes and extra features for Phlox theme
Application: Shortcodes and extra features for Phlox theme
Published on: May 17, 2024
Research Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in By Averta Shortcodes and extra features for Phlox theme allows PHP Local File Inclusion.This issue affects Shortcodes and extra features for Phlox theme: from n/a through 2.14.0.
Affected versions: max 2.15.0.
Status: vulnerable